What retirees should do in wake of Equifax data breach